If you know the name of the file a few things you might want to try
1) go to control panel/admin tools/ local policy. once that is up and running create a new software restriction policy in the addtional rules section. make a new rule based on path. put in the path to the file and disallow. if you know of any other files that are related to this file is using create rule for them also.
2) go to start/ run/ type msconfig
go to services and check off hide all microsoft service. now uncheck everything. this is going to stop anything you might need running but this part is only a tempory thing to do. IE if you have a remote desktop service that is not MS software it will not run after you do this part. next in the same msconfig go to start up and uncheck everything except explorer. look in the command tab this will tell you the location of the a file that will run on system start up. if you are not sure what it is then leave it alone. but anything you know of ie (adobe update service) and shit like that. make sure the checks are removed. you dont need this crap hammering down your boxes resources. once you apply this then you will be asked to restart. DONT RESTART. make note of the location of that software. restart your computer in safemode. and go to the directories where they are to be siting. IE c:\program files\shithead software. And delete all the crap you can. You should be able to delete the whole thing. now also check your local administrators group. IE right click my computer and go to manage. Any user in that group other then you and administrator should be removed. now restart the box normally. and see if you can get to where you need to go on the internet. if all is ok, this next process could take some time. you have to go into msconfig again and re-enable every service you shut off one at a time and restart the box every time. Bring the box to a full shut down and wait about 10 seconds for the drives to stop spinning. turn the box back on and keep turning on your services that you had shut off one at a time until everything is ok. if you find you are not able to get out to the internet sites after you reenable one then that is the fucker. Find its location and remove it. if you need software to remove the service let me know you can get them off of any windows resource kits. I'll throw up the service removal one for you. hope this helps. Just in my opinon I would just dump the box and rebuild it. I dont bother with any spyware or any filter software anymore. it ruins my internet experiance. i just run a virus protection and rebuild my boxes every 3 months nice and clean. shit xp load a new box in 20 minutes, all this time you have spent today trying ti fix this, and you could have been up and running clean and new. jugg.....
|